kernel/module.c in the Linux kernel before 5.12.14 mishandles Signature Verification, aka CID-0c18f29aae7c. Without CONFIG_MODULE_SIG, verification that a kernel module is signed, for loading via init_module, does not occur for a module.sig_enforce=1 command-line argument.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Nov 29, 2021 | Jul 7, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-develUpgrade kernel-headersUpgrade perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Sep 29, 2021 | Jul 7, 2021 |
| Suse | — | Upgrade dtb-hisiliconUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-preemptUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dtb-apmUpgrade dtb-amlogicUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-armUpgrade kernel-64kb-optionalUpgrade kernel-macrosUpgrade kernel-preempt-optionalUpgrade kernel-devel-azureUpgrade kernel-debugUpgrade dlm-kmp-azureUpgrade dtb-exynosUpgrade kernel-sourceUpgrade kernel-symsUpgrade dtb-xilinxUpgrade kernel-debug-develUpgrade cluster-md-kmp-defaultUpgrade kernel-develUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-source-azureUpgrade kernel-preempt-livepatch-develUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade dtb-renesasUpgrade kernel-docsUpgrade dtb-mediatekUpgrade cluster-md-kmp-preemptUpgrade reiserfs-kmp-azureUpgrade kernel-default-develUpgrade kernel-64kbUpgrade dtb-amdUpgrade kernel-syms-azureUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-develUpgrade gfs2-kmp-preemptUpgrade kernel-preemptUpgrade kselftests-kmp-preemptUpgrade kernel-defaultUpgrade dtb-allwinnerUpgrade kernel-obs-buildUpgrade dtb-alteraUpgrade dtb-marvellUpgrade dtb-qcomUpgrade dtb-lgUpgrade kernel-azure-develUpgrade kernel-preempt-extraUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-preemptUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade kernel-preempt-develUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-preemptUpgrade dtb-broadcomUpgrade dtb-zteUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-alUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade dtb-freescaleUpgrade kernel-source-vanillaUpgrade dtb-socionextUpgrade kernel-docs-htmlUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade kselftests-kmp-64kb | Jul 23, 2021 | Jul 7, 2021 |
| Ubuntu | — | Upgrade linux-aws-5.11Upgrade linux-oracle-5.11Upgrade linux-fipsUpgrade linux-azure-5.11Upgrade linux-azure-fipsUpgrade linux-gcp-fipsUpgrade linux-gcp-5.11Upgrade linux-aws-fips | Nov 19, 2024 | Jul 7, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 7, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub